CVE-2013-6381
published 2013-11-27CVE-2013-6381: Buffer overflow in the qeth_snmp_command function in drivers/s390/net/qeth_core_main.c in the Linux kernel through 3.12.1 allows local users to cause a denial…
PriorityP422medium6.9CVSS 2.0
AVLACMAuNCCICAC
EPSS
0.57%
44.1th percentile
Buffer overflow in the qeth_snmp_command function in drivers/s390/net/qeth_core_main.c in the Linux kernel through 3.12.1 allows local users to cause a denial of service or possibly have unspecified other impact via an SNMP ioctl call with a length value that is incompatible with the command-buffer size.
Affected
13 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | linux | < linux 3.11.10-1 (bookworm) | linux 3.11.10-1 (bookworm) |
| linux | linux_kernel | < 3.2.54 | 3.2.54 |
| linux | linux_kernel | >= 0 < 3.11.10-1 | 3.11.10-1 |
| linux | linux_kernel | >= 0 < 3.11.10-1 | 3.11.10-1 |
| linux | linux_kernel | >= 0 < 3.11.10-1 | 3.11.10-1 |
| linux | linux_kernel | >= 0 < 3.11.10-1 | 3.11.10-1 |
| linux | linux_kernel | >= 3.11 < 3.12.3 | 3.12.3 |
| linux | linux_kernel | >= 3.3 < 3.4.72 | 3.4.72 |
| linux | linux_kernel | >= 3.5 < 3.10.22 | 3.10.22 |
| msrc | azure_linux_3.0_arm | — | — |
| msrc | azure_linux_3.0_x64 | — | — |
| msrc | cbl_mariner_2.0_arm | — | — |
| msrc | cbl_mariner_2.0_x64 | — | — |
CVSS provenance
nvdv2.06.9MEDIUMAV:L/AC:M/Au:N/C:C/I:C/A:C
osv6.9MEDIUM
vendor_debian6.9LOW
vendor_msrc6.9MEDIUM
vendor_redhat6.9MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Microsoft
CVE-2013-6381: NIST NVD Details: https://nvd
vendor_msrc·2024-06-11·CVSS 6.9
CVE-2013-6381 [MEDIUM] CVE-2013-6381: NIST NVD Details: https://nvd
NIST NVD Details: https://nvd.nist.gov/vuln/detail/CVE-2013-6381
Mariner: Mariner
[email protected]: [email protected]
Customer Action Required: Yes
Remediation: kernel
Reference: https://nvd.nist.gov/vuln/detail/CVE-2013-6381
Red Hat
Kernel: qeth: buffer overflow in snmp ioctl
vendor_redhat·2013-11-22·CVSS 6.9
CVE-2013-6381 [MEDIUM] CWE-119 Kernel: qeth: buffer overflow in snmp ioctl
Kernel: qeth: buffer overflow in snmp ioctl
Buffer overflow in the qeth_snmp_command function in drivers/s390/net/qeth_core_main.c in the Linux kernel through 3.12.1 allows local users to cause a denial of service or possibly have unspecified other impact via an SNMP ioctl call with a length value that is incompatible with the command-buffer size.
Statement: This issue does not affect the version of the kernel package as shipped with
Red Hat Enterprise MRG 2.
Please note that this issue only affects s390x architecture.
Package: kernel (Red Hat Enterprise Linux 7) - Not affected
Package: realtime-kernel (Red Hat Enterprise MRG 2) - Not affected
Debian
CVE-2013-6381: linux - Buffer overflow in the qeth_snmp_command function in drivers/s390/net/qeth_core_...
vendor_debian·2013·CVSS 6.9
CVE-2013-6381 [MEDIUM] CVE-2013-6381: linux - Buffer overflow in the qeth_snmp_command function in drivers/s390/net/qeth_core_...
Buffer overflow in the qeth_snmp_command function in drivers/s390/net/qeth_core_main.c in the Linux kernel through 3.12.1 allows local users to cause a denial of service or possibly have unspecified other impact via an SNMP ioctl call with a length value that is incompatible with the command-buffer size.
Scope: local
bookworm: resolved (fixed in 3.11.10-1)
bullseye: resolved (fixed in 3.11.10-1)
forky: resolved (fixed in 3.11.10-1)
sid: resolved (fixed in 3.11.10-1)
trixie: resolved (fixed in 3.11.10-1)
GHSA
GHSA-f88x-mj9c-xm2g: Buffer overflow in the qeth_snmp_command function in drivers/s390/net/qeth_core_main
ghsa_unreviewed·2022-05-17
CVE-2013-6381 [MEDIUM] CWE-119 GHSA-f88x-mj9c-xm2g: Buffer overflow in the qeth_snmp_command function in drivers/s390/net/qeth_core_main
Buffer overflow in the qeth_snmp_command function in drivers/s390/net/qeth_core_main.c in the Linux kernel through 3.12.1 allows local users to cause a denial of service or possibly have unspecified other impact via an SNMP ioctl call with a length value that is incompatible with the command-buffer size.
OSV
CVE-2013-6381: Buffer overflow in the qeth_snmp_command function in drivers/s390/net/qeth_core_main
osv·2013-11-27·CVSS 6.9
CVE-2013-6381 [MEDIUM] CVE-2013-6381: Buffer overflow in the qeth_snmp_command function in drivers/s390/net/qeth_core_main
Buffer overflow in the qeth_snmp_command function in drivers/s390/net/qeth_core_main.c in the Linux kernel through 3.12.1 allows local users to cause a denial of service or possibly have unspecified other impact via an SNMP ioctl call with a length value that is incompatible with the command-buffer size.
No detection rules found.
No public exploits indexed.
http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=6fb392b1a63ae36c31f62bc3fc8630b49d602b62http://rhn.redhat.com/errata/RHSA-2014-0159.htmlhttp://rhn.redhat.com/errata/RHSA-2014-0284.htmlhttp://rhn.redhat.com/errata/RHSA-2014-0285.htmlhttp://www.openwall.com/lists/oss-security/2013/11/22/5http://www.securityfocus.com/bid/63890https://bugzilla.redhat.com/show_bug.cgi?id=1033600https://github.com/torvalds/linux/commit/6fb392b1a63ae36c31f62bc3fc8630b49d602b62http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=6fb392b1a63ae36c31f62bc3fc8630b49d602b62http://rhn.redhat.com/errata/RHSA-2014-0159.htmlhttp://rhn.redhat.com/errata/RHSA-2014-0284.htmlhttp://rhn.redhat.com/errata/RHSA-2014-0285.htmlhttp://www.openwall.com/lists/oss-security/2013/11/22/5http://www.securityfocus.com/bid/63890https://bugzilla.redhat.com/show_bug.cgi?id=1033600https://github.com/torvalds/linux/commit/6fb392b1a63ae36c31f62bc3fc8630b49d602b62
2013-11-27
Published